CISA Releases Five ICS Advisories Covering Vulnerabilities, and Exploits Surrounding ICS

CISA published five industrial control systems advisories on December 2, 2025, describing multiple high-severity vulnerabilities (including remote code execution and authentication bypasses) across vendors such as Industrial Video & Control, Iskra, Mirion Medical, and Mitsubishi Electric; the advisories include CVE identifiers, affected versions, CVSS scores, and mitigation guidance, and CISA reported that some of the flaws are being actively exploited, creating urgent patching and network-segmentation priorities for organizations operating critical infrastructure.